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SYSTEM AND METHOD FOR CONTROLLED COPYING AND MOVING OF 
CONTENT BETWEEN DEVICES AND DOMAINS BASED ON CONDITIONAL 
ENCRYPTION OF CONTENT KEY DEPENDING ON USAGE STATE 

5 BACKGROUND OF THE INVENTION 

In recent years the amount of information available in digital form has grown 
significantly. Digital data, which is easily reproduced and distributed, but retains superior 
quality, has been extremely beneficial to information and media content providers. The 

10 advantages for content providers, however, are not absolute. The same factors that make digital 
data attractive as a distribution format, i.e. high quality, easy reproduction and easy distribution, 
apply equally to pirates who make and distribute unlicensed copies of the data. Furthermore, 
with access to distribution mediums like the Internet millions of unlicensed, pirated, copies can 
be created effortlessly. This type of unlicensed copying is already widespread in the music 

15 industry with users of peer-to-peer file sharing services, like Gnutella, and costs the music 
industry millions in potential revenues. 

Copy protection techniques exist in the prior art to address these issues. For 
example, the content can be tied to the user's device by encrypting the content with a key unique 
to the device. This approach, however, severely limits what valid licensed users can do with 

20 their content. Consumers expect to be able to have some freedom in the way they use their 

content. They expect to be able to transfer the content to other devices they use; and, they expect 
to be able to make back-up copies to protect their content in the event of a hardware failure. 
Purchasers of music, for example, expect to be able to listen to the music they purchase at home, 
on their car stereo, and on portable audio devices. Accordingly, overly restrictive systems that 

25 prevent these types of uses are unlikely to be accepted in the marketplace. 
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SUMMARY OF THE INVENTION 

The above identified problems are solved and a technical advance is achieved in 
the art by providing a system and method for the controlled copying and moving of content 
between devices and domains. 
5 An exemplary method includes receiving content at a user's device. The received 

content is encrypted with a content key. The content key is protected by encrypting it with a 
domain key. A user's compliant devices, or a family's compliant devices, can be organized into 
an authorized domain. All the devices in an authorized domain would have the ability to decrypt 
the encrypted content key. A user can freely send the encrypted content and the encrypted 

10 content key to other devices in the domain. At the receiving device, the content key is decrypted 
to its clear form. The clear content key is then available to decrypt the content. This assures 
content providers that their content will not be subject to widespread piracy because only devices 
within the user's domain can decrypt content keys encrypted with the domain key. 

Another aspect of the present invention would ensure backwards compatibility by 

15 letting content providers distinguish protected content from unprotected or legacy content. This 
would be accomplished by applying a digital watermark to the protected content through the use 
of any of a number of known techniques, such as those provide by the Digimarc corporation. 
Watermarks are embedded into the content and can be made to be perceptible or imperceptible to 
users. Authorized devices can remove perceptible watermarks to ensure the content is 

20 unobstructed when rendered. Digital watermarks have the advantage of being robust meaning 
that once embedded it is difficult to remove them from the content even if the content is 
translated to other formats, e.g. if the content is printed or translated into an analog format. . 
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Where watermarks are employed, a device receiving the content would check for 
the watermark. Content that is watermarked is treated as protected content and undergoes the 
protection mechanisms described herein. Content that is not watermarked is treated as 
unprotected content. As such, no encryption is applied to the content and transfer of the content 
5 to other domains would be successful. 

Another embodiment of the present invention allows content providers to include 
information with the content dictating the ways consumers may use the content within their 
domain. For example, a digital video broadcast (DVB) could include usage state information in 
a program's service information (SI) table. The usage state information is read by the compliant 
10 device and tells it how the consumer can use the content. For example, the usage state might let 
the consumer move the program from one device to another but not copy the program. Or, the 
usage state information could dictate no copying or moving is allowed. 

Where usage states are employed, devices receiving content check for a usage 
state. If any usage restriction is applied, i.e. the usage state does not indicate usage as 
1 5 unrestricted, the content key is encrypted with a device key. Encryption with the device key 
ensures that only the receiving device can decrypt the content key. Accordingly, the receiving 
device has the ability to check that the usage restraints are satisfied before the content is used. 

In a further embodiment watermarks and usage states can be applied in 
combination to provide additional security. In this embodiment a content ID can be incorporated 
20 into the watermark. The same content ID is also associated with the usage state, thereby 
uniquely linking the watermarked content to the specific usage state. This approach has the 
advantage of ensuring that the system cannot be circumvented by attempts to associate different, 
less restrictive, usage states with the watermarked content. 
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In another embodiment of the invention broader freedom for the users is allowed 
by regulating how content is used outside the authorized domain. A domain traversal flag is 
included with the content in the same way disclosed for the usage state. The domain traversal 
flag indicates whether out of domain transfer of the content is allowed. A combination of the 
5 usage state and the domain traversal flag is used to precisely dictate what can be done with the 
content inside and outside the domain. 

Another embodiment of the present invention provides a method that allows the 
content provider, or content protection service provider, to know which content key will be used 
to encrypt the content without broadcasting the key itself. The content provider transmits a 
10 content key seed with the content. The content key is then generated at the receiving device by 
operating on the content key seed with the device's domain key, which the content provider has a 
copy of. The content provider can recreate the content key, if it needs to, by using its copy of the 
same domain key to operate on the content key seed in the same way. 

A multitude of interactions and business relationships are made possible by the 
15 present invention. When the present invention is used for complex transactions between users, 
content providers, content creators, etc., a trust management provider may be employed. The 
trust management provider is a further aspect of the present invention that can align different 
trust infrastructures used in different authorized devices, facilitate the transfer of content between 
users of different content providers, or act as an intermediary to support novel business models. 
20 It accomplishes this by providing a neutral trusted third party that can enforce the requirements 
of the content protection system. 

Other and further aspects of the invention will become apparent during the course 
of the following description and by reference to the attached drawings. 
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BRIEF DESCRIPTION OF THE FIGURES 

Figure 1 is a block diagram illustrating an exemplary embodiment of the present 
invention. 

Figures 2a and 2b are an exemplary flow chart by which an authorized border device 
5 receives content in the embodiment of Fig. 1. 

Figures 3a and 3b are an exemplary flow chart by which an authorized device transfers 
content to another authorized device in the embodiment of Fig. 1. 

Figures 4a and 4b are an exemplary flow chart by which an authorized device uses 
content in the embodiment of Fig. 1. 
.0 Figure 5 is a block diagram of an exemplary embodiment of the present invention 

employing a trust management provider. 

DETAILED DESCRIPTION OF THE INVENTION 

The content protection system of the present invention provides a flexible means 
5 for allowing content providers to dictate allowable uses of licensed content. It is built around a 
logical framework of authorized devices and authorized domains. Authorized devices are simply 
devices that contain the software and/or hardware necessary to comply with the disclosed 
system. Authorized domains are groups of authorized devices owned by a user. The inclusion of 
authorized domains in the content protection system of the present invention provides content 
0 distributors with a reasonable boundary to limit users' freedom to use their content. 

Fig. 1 is a block diagram illustrating an exemplary embodiment of the present 
invention. In accordance with the present invention content providers 50 distribute content to 
consumers who receive the content on compliant authorized devices, like authorized device A 
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12, or on non-compliant legacy devices, like legacy device 20. The content providers can 
distribute their content in any number of ways such as via satellite transmission 51, the Internet 
52 (via streaming or download), pre-recorded media 53 (like CD-ROMs), traditional broadcast 
54, or the like. 

5 Any device used to play or record content could be an authorized device. The 

only factor that distinguishes authorized devices from other devices is that authorized devices are 
designed or programmed to comply with the content protection system of the present invention. 
The devices would generally contain a CPU, RAM, long term memory, and a method for 
communicating with other devices. Examples of possible authorized devices include digital 

0 video recorders (DVR), TV receivers, DVD players/recorders, personal computers, personal 
digital assistants, stereo receivers, CD players/recorders, minidisc players/recorders, DAT 
players/recorders, digital video cameras, etc. 

A content recipient participating in the content protection system would have one 
or more authorized devices organized into an authorized domain. The authorized domain 

5 represents some logical grouping of devices. The authorized domain might include all of an 
individual's devices, a household's devices, or a company's devices. The authorized domain 
could be any grouping of devices that would be convenient to the user, or it may be dictated by 
the party that manages the content protection system. Where the content protection system 
manager dictates what grouping of devices may be placed in an authorized domain, it may do so 

) by limiting the total number of devices included in a domain. Or, it may dictate the relationship 
between the owners of the devices in a domain, e.g. they must all live at the same address. 

Still referring to Fig. 1, authorized domain 10 shows one possible arrangement of 
an authorized domain. Authorized domain 10 comprises five authorized devices, authorized 
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device A 12, authorized device B 13, authorized device C 14, authorized device D 15 and 
authorized device E 16. All of these devices are connected together via home network 11. In an 
advantageous embodiment, home network 1 1 would be a LAN connecting the various authorized 
devices using any know networking protocol and hardware interface, e.g. TCP/IP over a wired or 

5 wireless Ethernet network. A full-fledged home network, however, is not required. The basic 
requirement is only that an authorized device in the authorized domain has a way to transfer files 
between itself and another authorized device. This mechanism for transferring files could be 
anything from a Universal Serial Bus (USB) connection to a simple floppy disk. 

Authorized device A 12 and authorized device E 16 are border devices because 

3 they can receive content from outside the authorized domain 10. And, if the domain traversal 
flag allows, they can transfer files out of the domain. 

For example, authorized device A 12 might be a DVR that can receive DVB 
television content from satellite 51. The DVR might also have Internet connectivity that gives it 
the ability to send recorded programs to other devices over the Internet. In such a scenario the 

5 user of authorized domain 10 could use authorized device A 12 to send a program he liked to his 
friend's digital TV receiver in authorized domain 40. Of course this would only work if the 
usage state and domain traversal flag set by the DVB broadcaster allowed this use. 

The operation of the system is further demonstrated by showing how a person 
going on a trip might use the system. In this example, authorized device E 16 is a portable MP3 

) player and authorized device D 1 5 is a home stereo with a hard drive to store the user's MP3s. A 
user of the authorized domain 10 could, if allowed by the content provider, copy MP3 files from 
the stereo to the portable MP3 player using a short range wireless system like Bluetooth. She 
could then enjoy the music on the portable player while flying to her destination. Upon arrival, 
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if moves outside the authorized domain are allowed, she could move the music stored on the 
player to her rental car's stereo in authorized domain 30 for enjoyment while driving. 

BACKWARD COMPATIBILITY 
5 Backward compatibility is an important aspect in gaining acceptance for any new content 

protection scheme. Backward compatibility is important because of the countless number of 

non-compliant devices that are currently being used and the amount of time required to get a 

significant number of compliant devices into public use. Accordingly, few content providers 

will want to adopt a new system if it means they will have to limit their audience to the few 

0 compliant devices that have been sold. 

The present system could be implemented in a way that is not backward compatible. For 
example, content providers could distribute their content in encrypted form. Authorized border 
devices would have the required keys to decrypt the received content. Depending on the 
distribution method used, these keys could be generated every time content is transferred, which 

5 would be an advantageous method for Internet downloads; or, they could be stored in the 
authorized device and refreshed from time to time in a secure way, which would be the most 
useful method for DVB. This option might even be preferable to some content providers who 
are willing to forego backward compatibility for tighter control of their content. 

The invention can also be implemented in a manner that provides backward 

:0 compatibility through the use of watermarking. This would allow the content provider to 

distribute information that both retains the prescribed use limitations in compliant systems and is 
usable in non-compliant legacy systems. 
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Wateraiarking is a system where information can be embedded into content 
without obscuring the content The watermark applied to a piece of content can be as perceptible 
or imperceptible as the content provider wishes. Wateraiarking can accomplish this while 
remaining robust, i.e. the watermark cannot be removed from the content because it is part of the 
5 content. 

The robust nature of watermarking makes it ideal for creating a backward 
compatible content protection system. Watermarks can be used to positively identify content 
that is protected under the content protection system of the present invention thereby 
distinguishing it from legacy or unprotected content. Without a robust way of identifying 

0 protected content, pirates could strip the protection information from the content and thereby 
confuse authorized devices into treating protected content as unprotected or legacy content. In a 
system that didn't use watermarking, this could be accomplished by simply removing the usage 
state information and domain traversal flag from the content. With a watermark to identify 
protected content, an authorized device would still recognize the content as protected even if the 

5 information identifying the level of protection has been removed. In such a case the authorized 
device can then assume the content has been tampered with and apply the strictest available 
protection. 

As noted above, the watermarked content is not completely obscured and remains 
usable on legacy devices. An example of a crude form of visual watermarking would be to place 
>0 a large opaque mark directly over the content. Presumably, authorized devices would be able to 
remove this mark, through the use of watermark key, when rendering the content. Such a mark 
would severely limit the value of the content for legacy devices. The content provider can 
choose the level of obstruction it desires by using smaller and/or translucent marks. In deciding 
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on an appropriate level of obstruction, the content provider can balance its desire to protect its 
content against its need to serve legacy devices. This balance might take into account its desire 
to push consumers to upgrade to compliant devices, or the nature of the content being 
distributed. 

In situations where parity between the content quality for compliant and legacy 
devices is required, steganography can be used to completely hide the watermark. Such a 
technique might be used for network television where there is a large audience with legacy 
devices who are unlikely to upgrade to the latest equipment. 

In an advantageous embodiment of the present invention, the watermark will 
contain a content ID uniquely identifying the content. This content ID can then be used with 
usage information associated with the content. In this way usage restrictions are securely tied to 
the content to which they apply. The content ID prevents users from avoiding the protection 
scheme by substituting different usage information to be used with the content. Such an attempt 
will fail because the substituted usage information will not have the correct content ID associated 
with it. The content ID can be securely tied to the usage restriction through the use of hashing 
functions, digital signatures and/or any other known technique. 

The addition of a content ID in the watermark and associating that same content 
ID with the usage information has the further advantage of ensuring that the usage information 
broadcast by the content providers remains diverse. Without this unique identifier for the usage 
information, hashing functions applied to usage information associated with different content 
would return similar values. A party trying to circumvent the system could then learn the 
appropriate hash values for different usage rights and defeat thes protection. 
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OPERATION OF THE SYSTEM 

The basic operation of the system of the present invention relies on cryptographic 

techniques to protect content on an authorized device. Protection begins by encrypting the 
content and creating a voucher associated with the content. The voucher holds the key to decrypt 
5 the content, the usage state information and the domain traversal flag. The usage state and the 
domain traversal flag dictate how the content may be used. Usage states can range from 
unrestricted, meaning any copy, move or use is allowed, to completely restricted, which would 
prevent copying, moving or using the content. The content encryption key stored in the voucher 
is protected so that pirates cannot misappropriate it and use it to create unlicensed versions of the 
0 content. Content key protection is accomplished by encrypting the key itself or the whole 
voucher. In an advantageous embodiment, only the content key is encrypted. The other 
elements of the voucher are protected from tampering, but remain readable. This can be 
accomplished, for example, by using a cryptographic hashing function and then signing the hash 
by encrypting it with the device's private key. Keeping portions of the voucher readable when 
[ 5 the content is inaccessible has the advantage of providing users with information regarding why 
their attempt to use failed. In a superdistribution model the readable information could tell the 
user how to obtain a right to use the content. Additional encryption can be added to ensure 
higher levels of security. 

Figures 2a and 2b show an exemplary method by which an authorized border 
20 device receives content in the embodiment of Fig. 1 . In block 200, the device receives content. 
In block 210, the device checks for a watermark that would identify the content as protected. 

If there is no watermark, the device treats the content as unprotected or legacy 
content in block 212. This might include the creation of a voucher dictating that the usage state 
and domain traversal are completely unrestricted, but creation of a voucher is not strictly 

11 
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necessary. Using a voucher for unprotected content would allow designers to remove watermark 
detection procedures from non-border devices. Rather than checking for watermarks, non-border 
devices could simply refuse any non-vouchered content. 

If the content is watermarked, block 220 is executed and a content key is created 

5 and the content is encrypted with it. This step of encryption can be accomplished by any known 
techniques, such as RC-5, IDEA, Blowfish, Cast-n, Misty, Skipjack, AES, 3-DES. To ensure 
efficient operation it will most likely be accomplished using a symmetric cryptographic 
algorithm, like AES. If the watermark is perceptible this step might also include removing the 
perceptible portion of the watermark. Alternatively, the watermark could be removed when the 

[ 0 content is rendered. 

The creation of the content key can be accomplished by randomly generating the 
key or by using a content key seed transmitted with the content. Sending a content key seed with 
the content allows the content provider to know the content key that will be used to encrypt the 
content without broadcasting the content key itself. The content provider accomplishes this by 

1 5 sending along with the content key seed a content ID. The content key seed and the content ID 
are associated with one another in a way known only by the content provider. Upon receipt of 
the content key seed an authorized device generates a content key by encrypting the content key 
seed with its domain key. After the content key is created the content key seed is discarded and 
no longer used by the receiving device. When the device creates a voucher associated with the 

20 content it includes in the voucher the content ID and a domain ID identifying its domain. If the 
content provider ever needs the content key, it can use the content ID and domain ID contained 
in the voucher to look up the content key seed and the domain key. It can then perform the same 
operation performed by the authorized device to recreate the content key. 
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Giving the content provider the ability to recreate the content key is useful for at 
least three reasons. If the content key associated with the content is ever lost or destroyed, the 
content provider can recreate the key and create a new voucher for the content. If the content is 
transferred to a device where it cannot be used, the content provider could issue a valid voucher 
5 for the content. This is one way to enable superdistribution. Distributing the content key seed 
rather than the content key itself has the advantage of avoiding the need to protect the content 
key in transit, and creates an easy way to ensure that different domains have different content 
keys. 

Block 230 checks the domain traversal flag to determine if domain traversal is 
10 allowed. If domain traversal is not allowed, meaning the information cannot be sent out of the 
authorized domain, the content key is encrypted with a domain key in block 235. The domain 
key is a key shared by all the devices in an authorized domain. Having the same domain key is 
the thing that defines the devices as being part of a single domain. 

Block 240 checks the usage state information associated with the content. In most 
15 instances the usage state information will be transmitted with the content and will have an 
associated content ID, which will match a content ID contained in the watermark. The usage 
state information can have a variety of different settings, some possible usage states are: 

Unrestricted 
Copy X times 
20 Copy once 

Copy no more 
Copy never 

Copy never, move never 

25 If the usage state is anything other than unrestricted, the content key is encrypted in block 245 
using the public key of the receiving device. As is typical of public key cryptography systems, 
encryption with the public key of this device ensures that only the private key of this device can 

13 
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decrypt the content key. Since the content will be useless unless this device decrypts the content 
key, this step ensures that the device will control any of the content. If the use is unrestricted this 

step is unnecessary. 

An alternative to distributing the usage state with the content is to make the 
information implicit. Under this system allowable uses of the content are added by the receiving 
device rather than transmitted with the content. This avoids the need to download usage state 
information with the content. This system, however, lacks the flexibility of the system described 
above because all content would have the same usage state information. This system could be 
made somewhat more flexible system by using a few different usage states that are applied based 
on some other criteria. For example, in the DVB context different usage states could be applied 
based oh the channel the program was broadcast on. In this scenario regular networks might 
have liberal usage states, but pay-per-view channels might apply the strictest available usage 
state. 

Block 250 creates a voucher containing the encrypted content key, the usage state, 
content ID and the domain traversal flag. For enhanced security the voucher can be protected to 
ensure that a pirate does not alter the usage state information. This could be accomplished 
through the use of a cryptographic hashing function and digital signature. 

Finally, block 260 stores the voucher and encrypted content at the device. 

A careful review of the process just described will show that the content key is 
encrypted based on the type of protection asserted. If, for example, copying is unrestricted but 
transmission outside the domain is not allowed only the domain key will be used to encrypt the 
content key. Encrypting the content key based on the protection asserted simplifies the re- 
targeting of content to other devices. For example, re-targeting content that is usage unrestricted 
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and domain traversal forbidden would simply involve checking to see if the target device is 
within the domain and then sending the content and the voucher to the target device. No other 
operations are necessary. Even the step of checking whether the target device is in the domain 
could be omitted because an out of domain device would not have the requisite domain key so 
the encrypted content would be unusable. 

The situation just described is especially advantageous, because usage 
unrestricted and domain traversal forbidden is likely to be the prime setting chosen by content 
providers. In fact, it may be the only setting content providers would need implemented. This 
level of protection strikes a balance between protecting content from widespread piracy and 
retaining a fairly unrestricted level of use for licensed customers. 

Figures 3a and 3b are an exemplary flow chart by which an authorized device 
moves or copies previously received content to another authorized device in the embodiment of 
Fig. 1 . In block 300, the transfer is initiated. . , 

In block 310, the transferring device checks if the target device is within the 
domain. If it is not, the domain traversal flag in the voucher is checked in block 312 to see if 
domain traversal is allowed. If it is not allowed, the request is refused in block 318. As one 
would imagine, blocks 310, 312 and 318 are not strictly required because even if an out of 
domain device receives the content it will not be able to use it without the domain traversal key. 
The only advantage of these steps is that they quickly avoid the rest of the procedure if domain 

traversal is forbidden. 

In block 320, the voucher usage state is checked. If usage is unrestricted, the 
process proceeds immediately in block 360 to transfer the voucher and the content. If the usage 
state indicates that usage is in some way restricted, the usage state is checked in block 330 to see 
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if the requested operation is allowed. If it is not allowed, the request is refused in block 335. If 
the requested operation is allowed, the content key must be re-targeted. In block 340, the content 
key is decrypted using the transferring device's private key. Then in block 350, the content key 
is encrypted using the target device's public key. This newly encrypted content key is used as 

5 part of a re-targeted voucher to be sent to the new device. 

In block 355, any necessary changes in the usage state information are made. For 
example, if the usage state was copy X times, where X is a positive integer, X is reduced by 1. If 
X was 1, the usage state becomes copy no more. Copy no more and copy never are essentially 
the same, except copy no more might be used to indicate that the content provider be contacted 

.0 to purchase additional usage privileges. The copy once state listed above is identical to copy X 
where X equals 1. 

Block 355 is also the first place where the difference between copy and move 
becomes relevant. Copy indicates the creation of a duplicate of the file where the transferring 
and the target device retain a copy of the file. Conversely, move indicates that the transferring 

15 device does not retain a copy of the file. Always allowing moves would be a way protected 
digital content could be made to comply with the first sale doctrine of copyright law. 

With respect to step 355, if a move was requested, nothing would be done unless 
of course another usage control was implemented that restricted the number of moves 
(implementation of this control would be similar to copy X). If a copy is requested the voucher 

20 retained on the transferring device must be updated as described above, and new usage state 
information must be created for the re-targeted voucher. The re-targeted voucher would 
probably be given a usage state of copy no more to avoid the proliferation of copies, but it could 
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also get a copy of the original's now updated usage state. The re-targeted voucher would 
usually have the same domain traversal flag as the original voucher. 

Next in block 360, the content and voucher would be sent to the target device. 
This is either the re-targeted voucher or a copy of the original voucher if the yes branch of block 
5 320 was followed. 

Finally, if it is determined in block 365 that the requested transfer was a move, 
then, in block 370 the content and voucher are erased, or otherwise made inaccessible or 
illegible, on the transferring device. Block 375 marks the end of the routine. 

Figures 4a and 4b are an exemplary flow chart by which an authorized device 
0 uses content in the embodiment of Fig. 1 . The process begins in block 400 with a play request. 
In block 410, the usage state record in the voucher is checked. In blocks 420 and 425, play limits 
are enforced. This may simply require additional usage states dictating whether or not the 
content can be played, or how many times the content can be played. Obviously, blocks 420 and 
425 are removed if no play restrictions are used. In block 430, the content key in the voucher is 
15 decrypted with the device private key. This block, however, is only reached if the usage state is 
not unrestricted. Otherwise, the content key would not have been encrypted with the device's 
public key. 

In block 440, the domain traversal flag is checked. If domain traversal is 
forbidden, the content key must be decrypted in block 450 with the domain key. The content key 
20 is now clear and the content may be decrypted in block 460. Note, if the content is completely 
unprotected it would not be encrypted, so the content would not need to be decrypted. Finally, in 
block 470 the device renders the content. 
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Figure 5 is a block diagram depicting an exemplary embodiment of the present 
invention, similar to the embodiment of Fig. 1, but also including a trust management provider 
500. The trust management provider facilitates some of the more complex transactions that are 
enabled by the present invention. 

5 The present invention could be used as a comprehensive content protection 

scheme for any type of content or device. In this advantageous embodiment a multitude of 
content providers and device manufacturers would all implement the system. However, with a 
system so widespread the various different implementations of the content protection scheme 
might not all operate in the same way. In this scenario a trusted third party can be interposed in 

1 0 the form of a trust management provider to ensure the various implementations remain 
interoperable. 

In practice the trust management provider 500 can be implemented through the 
use of a server that can communicate with the requisite devices and which is programmed to 
enforce the rules of the system. 

15 Referring to Fig. 5, the various authorized devices 12-16 in authorized domain 10 

might all be manufactured by different entities. Accordingly, when a user of the domain adds a 
new device to the domain the trust management provider 500 can be consulted to certify that the 
new device meets the standards required by the system. This process could include 
communicating with a third party that dictates the rules for domain creation for this user; e.g. a 

20 content provider. Alternatively, the trust management provider might control the entire process 
of joining devices into authorized domains and maintaining the created domains. In this role the 
trust management provider could also replace unusable content keys produced with content key 
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seeds, as described above. The trust management provider might also provide information to the 
other devices in the domain concerning the operation of the new device. 

The trust management provider can also be used to facilitate inter-domain 
transfers, for example, between authorized domains 10 and 40. Authorized domains 10 and 40 
5 could both contain devices that receive and store DVB content. However, if they receive their 
content from different providers, e.g. different cable companies, issues may arise from the 
transfer. The content providers might want assurances that content would be adequately 
protected in the other domain. The trust management provider could check the requirements of 
the content provider and then determine if the receiving domain meets them. Or, the content 
L 0 provider may require payment if the content is being transferred to the user of a different service. 
The trust management provider can also coordinate the payment, see below. 

The use of a trust management provider can facilitate business transactions and 
usage-clearing involving protected content. For example, in a superdistribution model when 
content is sent from one user's domain to another's many payments may be generated. A 
15 concrete example will illustrate some possible payments and the utility of the trust management 
provider. User A downloads some music from a content provider over the Internet and pays for 
the use of the content. He then transfers a copy of the content to a friend User B in a different 
authorized domain. User B receives the content listens to sample and decides to purchase usage 
rights of his own. The trust management provider can ensure the following parties receive part 
20 of the payment: User A might get a portion for sending the content to User B, the content 
provider will get a portion, and the content creator will get a portion. The use of a trust 
management provider as a trusted neutral third party ensures that all such transactions are 
properly accounted for. 
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The many features and advantages of the present invention are apparent from the 
detailed specification, and thus, it is intended by the appended claims to cover all such features 
and advantages of the invention which fall within the true spirit and scope of the invention. 

Furthermore, since numerous modifications and variations will readily occur to 
5 those skilled in the art, it is not desired that the present invention be limited to the exact 
instruction and operation illustrated and described herein. Accordingly, all suitable 
modifications and equivalents that may be resorted to are intended to fall within the scope of the 
claims. 
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CLAIMS 

1 . A method of protecting content comprising: 

receiving content at a device; 

encrypting the content with a content key; 

encrypting the content key with a domain key; and 

storing the encrypted content key and the encrypted content. 

2. A method of protecting content comprising: 

receiving content at a device; 
encrypting the content with a content key; 
encrypting the content key with a domain key; and 
storing a voucher associated with the content; 

wherein the voucher includes the encrypted content key and a usage state 

record. 

3. The method according to claim 2 wherein the voucher also contains a domain 
traversal flag. 

4. The method according to claim 2 wherein the content is encrypted before the content 
is received at the device. 

5 . A method of protecting content comprising: 

receiving content at a device; 
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receiving a usage state record associated with the content; 
receiving a domain traversal flag associated with the content; 
encrypting the content with a content key; 

encrypting the content key with a device key if the usage state record indicates 
that usage is not unrestricted; 

encrypting the content key with a domain key if the domain traversal flag 
indicates that domain traversal is forbidden; and 
storing a voucher associated with the content: 

wherein the voucher contains the encrypted content key, the usage state 

record, and the domain traversal flag. 



6. The method according to claim 5 further comprising: 

protecting at least part of the voucher using at least one of the following: 
a cryptographic hashing function; or 
a digital signature. 

7 . A method of moving protected content within an authorized domain comprising: 

transmitting encrypted content and a voucher associated with said encrypted 
content from a first device in the authorized domain to a second device in the 
authorized domain; 

the voucher including an encrypted content key and a usage state record; 
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at the first device rendering any vouchers associated with said encrypted content 
unusable. 



8. The method of claim 7 further comprising: 

encrypting the entire voucher. 

9. The method of claim 7 further comprising: 

receiving said encrypted content and the voucher associated with that content in a 
second device in the authorized domain. 

10. The method of claim 9 comprising: 

decrypting the encrypted content key at the second device; and 
using the decrypted content key to decrypt the encrypted content. 

1 1 . A method for moving protected content from a first device in one authorized domain 
to a target device in a different authorized domain comprising: 

checking a voucher associated with a piece of content; 

the voucher including an encrypted content key, a usage state record and a domain 
traversal flag; 

if the usage state record allows moving, 

decrypting the encrypted content key with a device key; and 
encrypting the decrypted content key with the public key of the target 
device; 
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replacing the original encrypted content key with the re-encrypted content 
key in the voucher; 

transmitting encrypted content and the amended voucher to the target 
device; and 

at the first device rendering any vouchers associated with the content 
unusable. 

12. The method of claim 1 1 where the device key used to decrypt the encrypted content 
key is a private key of the first device. 



13. The method of claim 11 further comprising: 

decrypting the voucher received at the target device using a private key associated 
with the target device's public key; 

decrypting the encrypted content using the decrypted content key from the 
voucher. 

14. A method of copying protected content within an authorized domain to a target 
device within said authorized domain comprising: 

at a first device within the authorized domain, checking a usage state record 
contained in a voucher associated with a piece of encrypted content; 
the voucher including a usage state record, and an encrypted content key; 
if the usage state record is not unrestricted and allows copying: 
decrypting the encrypted content key with a device key; 
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re-encrypting the decrypted content key with a public key of the target 
device; 

updating the usage state record ; and 

storing the re-encrypted content key and the updated usage state record in 
a re-targeted voucher; and 
sending the encrypted content and the re-targeted voucher to the target device. 

15. The method of claim 14 where the device key used to decrypt the encrypted content 
key is a private key of the first device. 

16. The method of claim 14 further comprising: 

receiving the encrypted content and re-targeted voucher at the target device; 
decrypting the re-encrypted content key using a domain key; 
decrypting the encrypted content with the content key. 

17. The method of claim 16 further comprising: 

decrypting the re-encrypted content key with a private key of the target device. 

18. The method of claim 14 wherein the usage state record contains a budget of allowed 
copies and further comprising reducing the budget of allowed copies. 

19. A method for copying protected content from a device in a first authorized domain to 
a target device in a second authorized domain comprising: 
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in a first device within the first authorized domain, checking a usage state record 
contained in a voucher associated with a piece of encrypted content, wherein the 
voucher also includes an encrypted content key; 

if the usage state record or a domain traversal flag in said voucher indicates that 
inter-domain copying is allowed, 

decrypting the encrypted content key with a device key; 

re-encrypting the decrypted content key with a public key from the target 

device; 

updating the usage state; 

storing the updated usage state and the re-encrypted content key in a re- 
targeted voucher; and 

transmitting encrypted content and the re-targeted voucher to the target 
device. 

20. The method of claim 19 where the device key used to decrypt the encrypted content 
key is a private key of the first device. 

21. The method of claim 19 further comprising: 

protecting at least part of the re-targeted voucher using at least one of the 
following: 

a cryptographic hashing function; or 

a digital signature. 
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22. The method of claim 19 wherein the usage state record contains a budget of allowed ' 
copies and further comprising: 

reducing the budget of allowed copies. 

23. A method of identifying protected content while maintaining backwards compatibility 
comprising: 

receiving content; 

checking if content is watermarked; 

encrypting the content with a content key if the content is watermarked. 

24. The method of claim 23 further comprising: 

receiving usage information and an associated content ID; 

checking the watermark to see if a content ED contained therein matches the 

content ID associated with the usage information; 

treating the content as completely restricted if content ID associated with the 
usage information does not match the content ID contained in the watermark. 

25. The method of claim 24 wherein the usage information includes a usage state record 
and a domain traversal flag. 

26. The method of claim 23 further comprising: 

removing the watermark from the content. 
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27. The method of claim 24 further comprising: 
removing the watermark from the content. 
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28. A method of using protected content comprising: 

decrypting an encrypted content key with a domain key; 

decrypting an associated piece of content with the decrypted content key; and 

rendering the decrypted content. 

29. The method of claim 28 further comprising: 

decrypting the encrypted content key with a private key. 

30. A method of protecting content comprising: 

receiving content at a device; 

receiving a content key seed at the device; 

creating a content key by operating on the content key seed with a domain key; 
encrypting the content with the content key; 
encrypting the content key with the domain key; and 
storing the encrypted content key and the encrypted content. 

31. The method of claim 30 further comprising: 

receiving a content ID and usage information; 

creating a voucher including the encrypted content key, the content ID, a domain 
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ID, and usage information. 
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32. The method of claim 31 further comprising: 

protecting at least part of the voucher using at least one of the following: 
a cryptographic hashing function; or 
a digital signature. 

33. The method of claim 30 where the act of operating on the content key seed with a 
domain key is accomplished by encrypting the content key seed with the domain key. 

34. A method of creating a content key comprising: 

operating on a content key seed with a domain key; 

35. The method of claim 34 further comprising: 

receiving a content ED and a domain ID; 

using the content ID to determine the content key seed; 

using the domain ID to determine the domain key. 

36. The method of claim 34 further comprising: 

using a content ID to generate the content key seed. 

37. A method for registering an authorized device in an authorized domain comprising: 

transmitting information about the unregistered authorized device and the 
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authorized domain to a trust management provider; 

receiving certification from the trust management provider to add said authorized 
device to the authorized domain as a registered device. 

38. The method of claim 37 further comprising: 

the trust management provider contacting a third party to obtain the requirements 
of the authorized domain. 

39. The method of claim 37 further comprising: 

receiving information about the unregistered authorized device at a registered 
authorized device already a part of the authorized domain. 

40. A method of certifying the transfer of content out of an authorized device comprising: 

receiving a request to transfer content from a first authorized device to a second 
authorized device; 

contacting a trust management provider to verify the protection employed at the 
second authorized device; 

if trust management provides authorization, transferring content. 

41 . The method of claim 40 further comprising: 

the trust management provider contacting a third party to discern the protection 
required for the transfer to be authorized. 
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42. A method of providing payment in a superdistribution system comprising: 

transferring content from a first device to a second device; 

the second device contacting a trust management provider to purchase usage 

rights for the content; 

the trust management provider distributing proceeds from the purchase. 

43. The method of claim 42 where more than one party receives proceeds from the 
purchase. 

44. The method of claim 42 where a content provider receives some portion of the 
proceeds of the purchase. 

45. The method of claim 42 where users of the first device receive some portion of the 
proceeds of the purchase. 

46. The method of claim 42 further comprising: 

the trust management provider contacting the owner of the content to determine 
the terms of the purchase. 

47. A method of checking the integrity of a voucher comprising: 

receiving the voucher at a first device from a second device; 

computing a cryptographic hashing function over at least part of the voucher; 

decrypting an encrypted hash value stored in the voucher with a public key of the 
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second device; 

comparing the computed hash value with the stored hash value. 
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48. The method of claim 47 where if the computed hash value does not equal the stored 
hash value, indicating that the voucher has been tampered with. 

49. The method of claim 47 where the act of indicating the voucher has been tampered 
with includes making the content unusable. 

50. An article manufacture comprising: 

a computer readable medium comprising instructions for: 
receiving content at a device; 
encrypting the content with a content key; 
encrypting the content key with a domain key; and 
storing the encrypted content key and the encrypted content. 

51. An article of manufacture comprising: 

a computer readable medium comprising instructions for: 
receiving content at a device; 
encrypting the content with a content key; 
encrypting the content key with a domain key; and 
storing a voucher associated with the content; 
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wherein the voucher includes the encrypted content key and a usage state 
record. 



52. The article of manufacture of claim 51 wherein the voucher also contains a domain 
traversal flag. 

53. An article of manufacture comprising: 

a computer readable medium comprising instructions for: 
receiving content at a device; 

receiving a usage state record associated with the content; 
receiving a domain traversal flag associated with the content; 
encrypting the content with a content key; 

encrypting the content key with a device key if the usage state record indicates 
that usage is not unrestricted; 

encrypting the content key with a domain key if the domain traversal flag 
indicates that domain traversal is forbidden; and 
storing a voucher associated with the content: 

wherein the voucher contains the encrypted content key, the usage state 

record, and the domain traversal flag. 

54. The computer readable medium of claim 53 further comprising instructions for: 

protecting at least part of the voucher using at least one of the following: 
a cryptographic hashing function; or 
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a digital signature. 
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55. An article of manufacture comprising: 

a computer readable medium comprising instructions for: 

transmitting encrypted content and a voucher associated with said encrypted 
content from a first device in an authorized domain to a second device in the 
authorized domain; 

the voucher including an encrypted content key and a usage state record; 

at the first device rendering any vouchers associated with said encrypted content 

unusable. 

56. The computer readable medium of claim 55 further comprising instructions for: 

encrypting the entire voucher. 

57. An article of manufacture comprising: 

a computer readable medium comprising instructions for: 

on a first device checking a voucher associated with a piece of content; 

the voucher including an encrypted content key, a usage state record and a domain 

traversal flag; 

if the usage state record allows moving, 

decrypting the encrypted content key with a device key; and 
encrypting the decrypted content key with the public key of a target 
device; 
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replacing the original encrypted content key with the re-encrypted content 
key in the voucher; 

transmitting encrypted content and the amended voucher to the target 
device; and 

rendering any remaining vouchers associated with the content 
unusable. 



58. The article of manufacture of claim 57 where the device key used to decrypt the 
encrypted content key is a private key of the first device. 

59. An article of manufacture comprising: 

a computer readable medium comprising instructions for: 

checking a usage state record contained in a voucher associated with a piece of 
encrypted content; 

the voucher including a usage state record, and an encrypted content key; 
if the usage state record is not unrestricted and allows copying: 

decrypting the encrypted content key with a device key; 

re-encrypting the decrypted content key with a public key of a target 

device; 

updating the usage state record ; and 

storing the re-encrypted content key and the updated usage state record in 
a re-targeted voucher; and 
sending the encrypted content and the re-targeted voucher to the target device. 
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60. The article of manufacture of claim 59 where the device key used to decrypt the 
encrypted content key is a private key of the first device. 

61. The article of manufacture of claim 59 wherein the usage state record contains a 
budget of allowed copies and further comprising reducing the budget of allowed 
copies. 

62. An article of manufacture comprising: 

a computer readable medium comprising instructions for: 

checking a usage state record contained in a voucher associated with a piece of 
encrypted content, wherein the voucher also includes an encrypted content key; 
if the usage state record or a domain traversal flag in said voucher indicates that 
inter-domain copying is allowed, 

decrypting the encrypted content key with a device key; 

re-encrypting the decrypted content key with a public key from a target 

device; 

updating the usage state; 

storing the updated usage state and the re-encrypted content key in a re- 
targeted voucher; and 

transmitting encrypted content and the re-targeted voucher to the target 
device. 
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63. The article of manufacture of claim 62 where the device key used to decrypt the 
encrypted content key is a private key of the first device. 

64. The computer readable medium of claim 62 further comprising instructions for: 

protecting at least part of the re-targeted voucher using at least one of the 
following: 

a cryptographic hashing function; or 

a digital signature. 

65. The article of manufacture of claim 62 wherein the usage state record contains a 
budget of allowed copies and the computer readable medium further comprising 
instructions for: 

reducing the budget of allowed copies. 

66. An article of manufacture comprising: 

a computer readable medium comprising instructions for: 
receiving content; 
checking if content is watermarked; 

encrypting the content with a content key if the content is watermarked. 

67. The computer readable medium of claim 66 further comprising instructions for: 

receiving usage information and an associated content ID; 

checking the watermark to see if a content ID contained therein matches the 
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content ID associated with the usage information; 

treating the content as completely restricted if content ID associated with the 
usage information does not match the content ID contained in the watermark. 

5 68. The article of manufacture of 67 wherein the usage information includes a usage state 

record and a domain traversal flag: 

69. The computer readable medium of claim 66 further comprising instructions for: 

removing the watermark from the content. 

.0 

70. The computer readable medium of claim 67 further comprising instructions for: 

removing the watermark from the content. 

71. An article of manufacture comprising: 

1 5 a computer readable medium comprising instructions for: 

decrypting an encrypted content key with a domain key; 

decrypting an associated piece of content with the decrypted content key; and 

rendering the decrypted content. 

20 72. The computer readable medium of claim 71 further comprising instructions for: 

decrypting the encrypted content key with a private key. 
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73 . An article of manufacture comprising: 

a computer readable medium comprising instructions for: 
receiving content at a device; 
receiving a content key seed at the device; 

creating a content key by operating on the content key seed with a domain key; 
encrypting the content with the content key; 
encrypting the content key with the domain key; and 
storing the encrypted content key and the encrypted content. 

74. The computer readable medium of claim 73 further comprising instructions for: 

receiving a content ID and usage information; 

creating a voucher including the encrypted content key, the content ID, a domain 
ED, and usage information. 

75. The computer readable medium of claim 74 further comprising instructions for: 

protecting at least part of the voucher using at least one of the following: 
a cryptographic hashing function; or 
a digital signature. 

76. The article of manufacture of claim 73 where the act of operating on the content key 
seed with a domain key is accomplished by encrypting the content key seed with the 
domain key. 
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77. An article of manufacture comprising: 

a computer readable medium comprising instructions for: 
operating on a content key seed with a domain key; 

78. The computer readable medium of claim 77 further comprising instructions for: 

receiving a content ID and a domain ID; 

using the content ID to determine the content key seed; 

using the domain ID to determine the domain key. 

79. The computer readable medium of claim 77 further comprising instructions for: 

using a content ID to generate the content key seed. 

80. An article of manufacture comprising: 

a computer readable medium comprising instructions for: 

receiving information about an unregistered authorized device and an 
authorized domain; 

transmitting certification from to add said authorized device to the authorized 
domain as a registered device. 

81. The computer readable medium of claim 80 further comprising instructions for: 

contacting a third party to obtain the requirements of the authorized domain. 
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82. An article of manufacture comprising: 

a computer readable medium comprising instructions for: 

receiving a request to transfer content from a first authorized device to a second 
authorized device; 

contacting a trust management provider to verify the protection employed at the 
second authorized device; 

if trust management provides authorization, transferring content. 

83. An article of manufacture comprising: 

a computer readable medium comprising instructions for: 

receiving requests to purchase usage rights for a piece of content; 
distributing proceeds from the purchase. 

84. The article of manufacture of claim 83 where more than one party is sent proceeds 
from the purchase. 

85. The article of manufacture of claim 83 where a content provider is sent some portion 
of the proceeds of the purchase.. 

86. The computer readable medium of claim 83 further comprising instructions for: 

the trust management provider contacting the owner of the piece ofcontent to 
determine the terms of the purchase. 
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87. An article of manufacture comprising: 

a computer readable medium comprising instructions for: 
receiving a voucher from a second device; 

computing a cryptographic hashing function over at least part of the voucher; 
decrypting an encrypted hash value stored in the voucher with a public key of the 
second device; 

comparing the computed hash value with the stored hash value. 

88. The article of manufacture of claim 87 where if the computed hash value does not 
equal the stored hash value, indicating that the voucher has been tampered with. 

89. The article of manufacture of claim 87 where the act of indicating the voucher has 
been tampered with includes making the content unusable. 

90. An apparatus capable of protecting content comprising: 

means for receiving content at said appartus; 

means for encrypting the content with a content key; 

means for encrypting the content key with a domain key; and 

means for storing the encrypted content key and the encrypted content. 

91. An apparatus capable of protecting content comprising: 

means for receiving content at said appartus; 
means for encrypting the content with a content key; 
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means for encrypting the content key with a domain key; and 
means for storing a voucher associated with the content; 

wherein the voucher includes the encrypted content key and a usage state 

record. 



92. The apparatus of claim 91 wherein the voucher also contains a domain traversal flag. 

93. An apparatus for protecting content comprising: 
means for receiving content at said apparatus; 

means for receiving a usage state record associated with the content; 
means for receiving a domain traversal flag associated with the content; 
means for encrypting the content with a content key; 

means for encrypting the content key with a device key if the usage state record 
indicates that usage is not unrestricted; 

means for encrypting the content key with a domain key if the domain traversal flag 
indicates that domain traversal is forbidden; and 
means for storing a voucher associated with the content: 

wherein the voucher contains the encrypted content key, the usage state 

record, and the domain traversal flag. 



94. The apparatus of claim 93 further comprising: 

means for protecting at least part of the voucher using at least one of the 
following: 
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a cryptographic hashing function; or 
a digital signature. 

95. An apparatus capable of moving protected content within an authorized domain 
comprising: 

means for transmitting encrypted content and a voucher associated with said 
encrypted content from said apparatus to a second device in the authorized domain; 
the voucher including an encrypted content key and a usage state record; 
means for rendering any vouchers associated with said encrypted content unusable. 

96. The apparatus of claim 95 further comprising: 

means for encrypting the entire voucher. 

97. An apparatus capable of moving protected content to a target device in a different 
authorized domain comprising: 

means for checking a voucher associated with a piece of content; 

the voucher including an encrypted content key, a usage state record and a domain 

traversal flag; 

means for decrypting the encrypted content key with a device key; 

means for encrypting the decrypted content key with the public key of the target 

device; 

means for replacing the original encrypted content key with the re-encrypted content 
key; 
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means for transmitting encrypted content and the amended voucher to the target 
device; and 

means for rendering any vouchers associated with the content unusable. 

98. The apparatus claim 97 where the device key used to decrypt the encrypted content 
key is a private key of the apparatus. 

99. An apparatus for copying protected content within an authorized domain to a target 
device within said authorized domain comprising: 

means for checking a usage state record contained in a voucher associated with a 
piece of encrypted content; 

the voucher including a usage state record, and an encrypted content key; 

means for decrypting the encrypted content key with a device key; 

means for re-encrypting the decrypted content key with a public key of the target 

device; 

means for updating the usage state record ; 

means for storing the re-encrypted content key and the updated usage state record in 
re-targeted voucher; and 

means for sending the encrypted content and the re-targeted voucher to the target 
device. 
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1 00. The apparatus of claim 99 where the device key used to decrypt the encrypted 
content key is a private key of the first device. 



101. The apparatus of claim 99 wherein the usage state record contains a budget of 
allowed copies and further comprising reducing the budget of allowed copies. 

102. An apparatus capable of copying protected content to a target device in a second 
authorized domain comprising: 

means for checking a usage state record contained in a voucher associated with a 
piece of encrypted content, wherein the voucher also includes an encrypted content 

key; 

means for decrypting the encrypted content key with a device key; 

means for re-encrypting the decrypted content key with a public key from the target 

device; 

means for updating the usage state; 

means for storing the updated usage state and the re-encrypted content key in a re- 
targeted voucher; and 

means for transmitting encrypted content and the re-targeted voucher to the target 
device. 

1 03 . The apparatus of claim 1 02 where the device key used to decrypt the encrypted 
content key is a private key of the first device. 
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1 04. The apparatus of claim 1 02 further comprising: 

means for protecting at least part of the re-targeted voucher using at least one of 

the following: 

a cryptographic hashing function; or 
a digital signature. 

105. The apparatus of claim 102 wherein the usage state record contains a budget of 
allowed copies and further comprising: 

means for reducing the budget of allowed copies. 

1 06. An apparatus capable of identifying protected content while maintaining 
backwards compatibility comprising: 

means for receiving content; 

means for checking if content is watermarked; 

means for encrypting the content with a content key if the content is watermarked. 

1 07. The apparatus of claim 106 further comprising: 

means for receiving usage information and an associated content ID; 

means for checking the watermark to see if a content ID contained therein matches 

the content ID associated with the usage information; 

means for treating the content as completely restricted if content ID associated with 
the usage information does not match the content ID contained in the watermark. 
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1 08 . The apparatus of claim 1 07 wherein the usage information includes a usage state 
record and a domain traversal flag. 



109. The apparatus of claim 106 further comprising: 
means for removing the watermark from the content. 

1 1 0. The apparatus of claim 1 07 further comprising: 
means removing the watermark from the content. 

111. An apparatus for using protected content comprising: 

means for decrypting an encrypted content key with a domain key; 

means for decrypting an associated piece of content with the decrypted content key; 

and 

means for rendering the decrypted content. 

112. The apparatus of claim 1 1 1 further comprising: 

means for decrypting the encrypted content key with a private key. 

113. An apparatus for protecting content comprising: 
means for receiving content at said apparatus; 

means for receiving a content key seed at the apparatus; 

means for creating a content key by operating on the content key seed with a domain 
key; 
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means for encrypting the content with the content key; 

means for encrypting the content key with the domain key; and 

means for storing the encrypted content key and the encrypted content. 



5 



114. The apparatus of claim 1 1 3 further comprising: 



means for receiving a content ID and usage information; 

means for creating a voucher including the encrypted content key, the content ID, a 
domain ID, and usage information. 

115. The apparatus of claim 1 14 further comprising: 

means forprotecting at least part of the voucher using at least one of the following: 
a cryptographic hashing function; or 
a digital signature. 

116. The apparatus of claim 1 1 3 where the means for operating on the content key se 
with a domain key is accomplished by encrypting the content key seed with the 
domain key. 

117. An apparatus for creating a content key comprising: 



20 



means for operating on a content key seed with a domain key; 

means forreceiving a content ID and a domain ID; 

means for using the content ID to determine the content key seed; 
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means using the domain ID to determine the domain key. 

118. Theapparatus of claim 117 further comprising: 

means for using a content ED to generate the content key seed. 

119. An apparatus capable of registering an authorized device in an authorized domain 
comprising: 

means for receiving information about the unregistered authorized device and the 
authorized domain to a trust management provider; 

means for transmitting certification from the trust management provider to add said 
authorized device to the authorized domain as a registered device. 

120. An apparatus capable of checking the integrity of a voucher comprising: 
means for receiving a voucher from a second device; 

means for computing a cryptographic hashing function over at least part of the 
voucher; 

means for decrypting an encrypted hash value stored in the voucher with a public key 
of the second device; 

means for comparing the computed hash value with the stored hash value. 

121. The apparatus of claim 120 further comprising: 

means for indicating that the voucher has been tampered with. 
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1 22. The apparatus of claim 1 20 where the means for indicating the voucher has been 
tampered with includes making the content unusable. 
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